EUVD-2010-5048

Malware in sbrugna...

CVE-2010-5084

The cross-site request forgery CSRF protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via...

Cross site request forgery (csrf)

The cross-site request forgery CSRF protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via...

PT-2012-1327

Name of the Vulnerable Software and Affected Versions e107 versions prior to 0.7.23 Description The issue concerns a predictable random token used in the cross-site request forgery CSRF protection mechanism. This allows remote attackers to hijack the authentication of administrators for requests...